If passed, consumers must be provided one or more secure and reliable means to submit a consumer request (e.g., data portability, erasure, access, opt-out) and respond within 45 days of receipt, and risk assessments must be conducted when processing personal data for purposes of targeted advertising, profiling and sharing of personal data; enforcement is exercised by the Attorney General (penalties up to $7,500 for each violation), as consumers have no private right of action.
Contact us at Value Privacy for a list of what companies will need to be ready to support – from Data Risk Assessments, Vendor Management to Privacy statements